[Snort-users] error on "make" in so_rules

[Jeffrey Denton]

On Sun, Apr 20, 2008 at 11:38 PM, Rachmat Hidayat Al-Anshar
<rachmat_hidayat_02 at ...131...> wrote:
> Hi all :)
>
>  I got this following error message when I try to
>  issuing "make" in so_rules directory:
>
>  # make
>  building p2p ... cc -c -ggdb -I. -I.. -I../..
>  -I../src/dynamic-preprocessors/include/
>  -I/usr/local/include
>  -I../src/dynamic-examples/dynamic-rule/ -fPIC
>  -fno-stack-protector -D DETECTION_LIB_NAME=\"p2p\" -o
>  p2p.o p2p.c
>  cc -c -ggdb -I. -I.. -I../..
>  -I../src/dynamic-preprocessors/include/
>  -I/usr/local/include
>  -I../src/dynamic-examples/dynamic-rule/ -fPIC
>  -fno-stack-protector -D DETECTION_LIB_NAME=\"p2p\" -o
>  _meta.o _meta.c
>  ld: p2p_*.o: No such file: No such file or directory
>  *** Error code 1
>
>  Stop in /etc/snort/so_rules (line 22 of Makefile).

The so_rules directory needs to be located in the Snort source
directory (snort-2.8.1/so_rules) when compiled.  So unless you keep
the source in /etc/snort...

The snortrules-snapshot-CURRENT.tar.gz currently available from
snort.org, registered user release, version 2.8, released on
2008-03-11, has a problem with the so_rules Makefile.  I reported this
on 15 Mar 2008.  Matthew Watchinski says this issue is in the bug
tracking system.

>
>
>  What should I do to solving that kind of problem?
>  nb: My Snort box is an OpenBSD4.1 machine.
>

It would help to know the version of Snort and rules that you are using.